Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
1516b14af89de8c59f8c2fc9d8cd3400_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1516b14af89de8c59f8c2fc9d8cd3400_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
1516b14af89de8c59f8c2fc9d8cd3400_JaffaCakes118
Size
318KB
MD5
1516b14af89de8c59f8c2fc9d8cd3400
SHA1
24dc410d9e3a5b73992d07a8769fd884efabe509
SHA256
996dab4428effeff65601797f43213f9645157debe37e3b71f6218ef5d596a51
SHA512
da1c4f927fa7916fafd18ad2b1e6f49d06bd0cb6552ef953b421832eb52742fa01b71c50a891a54fa2b39b07ebc0a887a3ba537996ee26c573ccdd0abefe5139
SSDEEP
6144:f37VFvGERZGCNtMXgCSqBG7agspoGKRmvwQ35DEKKy20lDLm7U2rN1Ac:f7eEht4BG7a3qmoQ3VEKKy1DLkPrNP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ